RiskRecon, a Mastercard Company, and the Cyentia Institute have published an in-depth study that explores the current state of third-party risk management (TPRM) programs and practices. The research found that TPRM professionals increasingly do not trust that security questionnaires provide sufficient information to properly understand and act on their third-party risk.
During ‘Audit & Beyond’, AuditBoard’s second annual user conference, more than five thousand audit, risk, and compliance professionals virtually convened for two days to discuss the dynamic state of risk in 2020 and its associated challenges.
With shoppers looking ahead to the busy festive season, PCI Pal, the global provider of cloud-based secure payment solutions, has released a new study that shows data security concerns will influence how and where people make their purchases this year.
COVID-19 has reorganized the risk landscape for chief audit executives (CAEs), and CAEs have listed IT governance as the top risk for 2021, according to Gartner. Analysts say that the pandemic is giving rise to new sets of risks while exacerbating long-standing vulnerabilities.
We’re told that, in a modern market landscape, each business process should add value. But is there really competitive advantage in risk management – and how can this be optimised? Dr. Iain Brown makes some suggestions…
For the past 30 years, enterprise risk management (ERM) programs have helped organizations proactively identify and address risks, however, many times it provides limited insight into strategy and strategic risks, according to a new RIMS report, ‘Pivoting from ERM to SRM’.
The Software Engineering Institute (SEI) has released the latest model in its Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) suite. The OCTAVE FORTE (OCTAVE For the Enterprise) model for enterprise risk management helps executives and other decision makers understand and prioritize the complex risks affecting their organizations.
The Institute of Internal Auditors (IIA) has published ‘OnRisk: A Guide to Understanding, Aligning, and Optimizing Risk 2021’ which examines the views of those who most directly involved in risk management – boards, executive management, and internal audit.
The US NIST has released a new publication, ‘NISTIR 8286, Integrating Cybersecurity and Enterprise Risk Management (ERM)’. This aims to promote greater understanding of the relationship between cyber security risk management and ERM, and the benefits of integrating those approaches.
The entire Continuity Central website is scanned daily by Sucuri to ensure that no malware exists within the site. This means that you can browse with complete confidence.
Business continuity can be defined as 'the processes, procedures, decisions and activities to ensure that an organization can continue to function through an operational interruption'. Read more about the basics of business continuity here.
